3 ms·
Ask HN: Who does OSS security audits?
We have an exceptionally large code base of Java, "R", C++, and Javascript... and are looking to contract with an established vendor to do security audits and ongoing health monitoring. Is there a list of vendors that do this work (hopefully at a discount? funding is always tight).
- mtmail 3y agohttps://www.radicallyopensecurity.com/ https://www.radicallyopensecurity.com/ ("Non-Profit Computer Security Consultancy") was mentioned on the frontpage yesterday. I have a friend working at https://www.bugcrowd.com/ https://www.bugcrowd.com/ that's probably the other end of the spectrum, being all enterprise with sales teams.
- w10-1 3y agoSonatype (not an audit, but ongoing software supply-chain management) https://www.sonatype.com https://www.sonatype.com They got their start from Java Maven-based projects and progressed via the Nexus binary repository.